Tuesday, 4 August 2009

Get firefox 3.5.2 to fix more issues and Vulnerabilities


Firefox 3.5.2 fixes the following issues:

Impact key:

  1. Critical: Vulnerability can be used to run attacker code and install software, requiring no user interaction beyond normal browsing.
  2. High: Vulnerability can be used to gather sensitive data from sites in other windows or inject data or code into those sites, requiring no more than normal browsing actions.
  3. Moderate: Vulnerabilities that would otherwise be High or Critical except they only work in uncommon non-default configurations or require the user to perform complicated and/or unlikely steps.
  4. Low: Minor security vulnerabilities such as Denial of Service attacks, minor data leaks, or spoofs. (Undetectable spoofs of SSL indicia would have "High" impact because those are generally used to steal sensitive data intended for other sites.)

Fixed in Firefox 3.5.2

MFSA 2009-46 Chrome privilege escalation due to incorrectly cached wrapper
MFSA 2009-45 Crashes with evidence of memory corruption (rv:1.9.1.2/1.9.0.13)
MFSA 2009-44 Location bar and SSL indicator spoofing via window.open() on invalid URL
MFSA 2009-43 Heap overflow in certificate regexp parsing
MFSA 2009-42 Compromise of SSL-protected communication
MFSA 2009-38 Data corruption with SOCKS5 reply containing DNS name longer than 15 characters

Complete list of bug fixes https://bugzilla.mozilla.org/buglist.cgi?quicksearch=ALL%20status1.9.1%3A.2-fixed

Download
or If firefox is already installed just update it to Firefox 3.5.2
Go to by navigating Help and then Check for Updates to get the updates.
Digg Google Bookmarks reddit Mixx StumbleUpon Technorati Yahoo! Buzz DesignFloat Delicious BlinkList Furl

0 comments: on "Get firefox 3.5.2 to fix more issues and Vulnerabilities"

Post a Comment